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FINAL ACTION 

1 . Amendment A, received on 22 September 2010, has been entered into record. 
In this amendment, claims 1, 2, 4, 5, 9, 10, 12, 13, 16, 17, 21-23, and 25 have been 
amended, claims 6-8, 18-20, and 26-29 have been cancelled, and claim 30 has been 
added. 

2. Claims 1-5, 9-17, 21-25, and 30 are presented for examination. 



Response to Arguments 

3. With regards to the objection to the specification, the applicant has submitted 
amendments, and the examiner hereby withdraws the objection. 

4. With regards to the objection to the drawings, the applicant has submitted 
replacement sheets, and the examiner hereby withdraws the objection. 

5. Applicant's arguments with respect to the rejection of claims 1,10, and 26 under 
35 USC 112, second paragraph have been fully considered and are persuasive. The 
rejection of 30 March 2010 has been withdrawn. 

6. Applicant's arguments with respect to the rejection of claims 1-12, 26, and 28 
under 35 USC 101 have been fully considered and are persuasive. The rejection of 30 
March 2010 has been withdrawn. 

7. Applicant's arguments with respect to claims 1-5, 9-17, 21-25, and 30 have been 
considered but are moot in view of the new ground(s) of rejection. 
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Claim Objections 

8. Claims 1, 10, 13, and 30 are objected to because of the following informalities: 

a. In claim 1 , line 5: "a digital storage medium" is unclear if it relates to "a 
storage digital storage medium" (claim 1, lines 3-4) and should read -the digital 
storage medium-; 

b. Claim 10 has been amended to be dependent on claim 6, which is a 
cancelled claim. The examiner believes claim 10 should be dependent on claim 
1 , and has treated it as such for the remainder of this office action. 

c. In claim 13, line 5: "a storage medium" is unclear if it relates to "a 
replaceable or writable storage medium" (claim 13, line 3); 

d. In claim 30, line 6: "the digital data stream" lacks antecedent basis; 

e. In claim 30, line 7: "the communication device" lacks antecedent basis. 
Appropriate correction is required. 



Drawings 

9. The drawings were received on 22 September 2010. These drawings are 
acceptable. 



Claim Rejections - 35 USC § 101 
10. 35 U.S.C. 101 reads as follows: 



Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 
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Claim 30 is rejected under 35 U.S.C. 101 because the claimed invention is directed to 
non-statutory subject matter. 

Claim 30 is rejected under 35 U.S.C. 1 01 as not falling within one of the four 
statutory categories of invention. Claim 30 recites "A computer-readable medium" 
which typically covers forms of non-transitory tangible media and transitory propagating 
signals per se in view of the ordinary and customary meaning of computer readable 
media. Therefore, claim 30 is considered to be non-statutory. It is noted that adding 
the limitation "non-transitory" to the claim would exclude transitory propagating signals 
perse and would thus make the claim statutory. 

Claim Rejections - 35 USC § 103 

1 1 . The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

12. Claims 1, 2, 4, 5, 11-14, 16, 17, 24, 25, and 30 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Bush (US 2002/0002675 A1) in view of Shefi (US 
6,445,794 B1). 

As to claims 1 and 30, Bush discloses a system and method for secure encryption of 
data packets for transmission over unsecured networks, the system and method having: 
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providing a communication devices which has an interface for a 
digital storage medium, whose content may be read out and duplicated 
(0032, lines 3-5), 

providing a digital storage medium which is connected to the 
interface, storing a supply of symbols for encryption on the digital storage 
medium (0032, lines 3-5; 0061 , lines 1-6); 

reading out the symbols from the digital storage medium using the 
addresses on the digital storage medium (0032, lines 3-5; 0061, lines 1-6), 

employing the read out symbols for encrypting or decrypting the 
digital data stream of the communication device (0041, lines 4-9; 0042, lines 
3-12). 

Bush fails to specifically disclose: 

providing a first random generator on the communication device 
which determines addresses on the digital storage medium. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Bush, as taught by Shefi. 
Shefi discloses a system and method for synchronizing one time pad encryption keys, 
the system and method having: 

providing a first random generator on the communication device 

which determines addresses (i.e. pointer) on the digital storage medium (i.e. 

non-volatile memory) (col. 4, lines 40-51, 58-62). 
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Given the teaching of Shefi, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Bush with the teachings of Shefi by randomly determining an address 
of symbols on a storage medium. Shefi recites motivation by disclosing that randomly 
selecting symbols to be used for encryption/decryption produces a system that uses a 
one-time pad that can be used for secure communication on an insecure channel or for 
secure identification which is automated and practicable for wide-spread communication 
while not being liable to a brute force attack on the one-time pad itself (col. 3, lines 65- 
67; col. 4, lines 1-4). It is obvious that the teachings of Shefi would have improved the 
teachings of Bush by randomizing which symbols are selected for encryption by 
randomly generating addresses in order to provide for secure communication using a 
one-time pad while protecting against brute force attacks on the one-time pad. 

As to claim 13, Bush discloses: 

an interface for a replaceable or writable storage medium, whose 
content may be read out and duplicated, a storage medium connected to 
the interface comprising a supply of symbols for encryption, which may be 
read by using an address or storage on the storage medium (0032, lines 3-5; 
0061, lines 1-6), 

an encryption unit, which is set up so that it uses the supply of 
symbols for encrypting or decrypting the digital data stream of the 
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communication devices by accessing this supply through the addresses 

(0041 , lines 4-9; 0042, lines 3-1 2). 
Bush fails to specifically disclose: 

a first random generator on the communication device which 
determines the address on the storage medium. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Bush, as taught by Shefi. 
Shefi discloses: 

a first random generator on the communication device which 
determines the address (i.e. pointer) on the storage medium (i.e. non-volatile 
memory) (col. 4, lines 40-51 , 58-62). 
Given the teaching of Shefi, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Bush with the teachings of Shefi by randomly determining an address. 
Please refer to the motivation recited above with respect to claims 1 and 30 as to why it 
is obvious to apply the teachings of Shefi to the teachings of Bush. 

As to claims 2 and 14, Bush discloses: 

wherein the symbols on the storage medium are only used once 

(0013, lines 8-10). 



As to claims 4 and 16, Bush discloses: 
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wherein the communication device is a radio device, laptop, PDA, or 
a mobile telephone which has an interface for a memory card (0013, lines 
12-15). 



As to claims 5 and 17, Bush discloses: 

wherein the storage medium is a flash memory card, a hard drive, or 
an optical storage drive, whose information may be addressed (0013, lines 
17-18). 



As to claims 11 and 24, Bush discloses: 

wherein a permutation of the digital data stream is performed before 
it is transmitted (0044, lines 4-6). 



As to claims 12 and 25, Bush fails to specifically disclose: 

wherein the symbols on the storage medium are generated by the 
noise of an analog source using an A/D converter. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Bush, as taught by Shefi. 
Shefi discloses a system and method for synchronizing one time pad encryption keys, 
the system and method having: 
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wherein the symbols on the storage medium are generated by the 
noise of an analog source using an AID converter (col. 4, lines 58-64) but 
does not disclose the usage of an A/D converter. 
It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to use an A/D converter to convert an analog signal to a digital signal since it 
was known in the art that an analog noise signal must be converted before it can be 
used in a digital system. 

Given the teaching of Shefi, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Bush with the teachings of Shefi by using an analog noise source. 
Shefi recites motivation by disclosing that using a source of physical random 
phenomena can produce true random numbers (col. 4, lines 58-60). It is obvious that 
the teachings of Shefi would have improved the teachings of Bush by using an analog 
noise source in order to produce true random numbers. 

1 3. Claims 3, 9, 1 5, 21 , and 22 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Bush in view of Shefi as applied to claims 1 and 1 3 above, and 
further in view of Kauffman et al. (US 2002/0159588 A1 and Kauffman hereinafter). 
As to claims 3 and 15, Bush in view of Shefi fails to specifically disclose: 

wherein the symbols are encrypted and decrypted with the data 
stream using mod2. 
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Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Bush in view of Shefi, as taught by Kauffman. 
Kauffman discloses a system and method for cryptography with unconditional security, 
the system and method having: 

wherein the symbols are encrypted and decrypted with the data 
stream using mod2 (0004, lines 1-9). 
Given the teaching of Kauffman, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Bush in view of Shefi with the teachings of Kauffman by 
using mod2 for encryption and decryption. Kauffman recites motivation by disclosing 
that using modulo 2 for encryption reduces the data size of the resulting cryptogram 
(0004, lines 1-3). It is obvious that the teachings of Kauffman would have improved the 
teachings of Bush in view of Shefi by using mod2 for encryption and decryption in order 
to produce a cryptogram that is smaller in size. 

As to claims 9 and 21 , Bush in view of Shefi fails to specifically disclose: 

wherein a status of the first random generator is transmitted to 
synchronize the encryption. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Bush in view of Shefi, as taught by Kauffman. 
Kauffman discloses: 
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wherein a status of the first random generator is transmitted to 
synchronize the encryption (0031, lines 10-15). 
Given the teaching of Kauffman, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Bush in view of Shefi with the teachings of Kauffman by 
transmitting the status of a generator for synchronization. Kauffman recites motivation 
by disclosing that the receiver must have the same random number sequence the 
sender used or must be able to reproduce it in order to perform successful encryption 
and decryption (0005, lines 3-5). It is obvious that the teachings of Kauffman would 
have improved the teachings of Bush in view of Shefi by transmitting information for 
synchronizing the symbols in order to ensure that the sender and receiver are using the 
same sequence. 

As to claim 22, Bush in view of Shefi fails to specifically disclose: 

means, through which the status of the first random generator is 
transmitted at specific intervals. 
Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Bush in view of Shefi, as taught by Kauffman. 
Kauffman discloses: 

means, through which the status of the first random generator is 
transmitted at specific intervals (0021, lines 11-15). 
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Given the teaching of Kauffman, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Bush in view of Shefi with the teachings of Kauffman by 
transmitting the status of a generator at specific intervals. Kauffman recites motivation 
by disclosing that synchronizing at regular intervals thwarts attackers from attacking the 
random generator's state (0021 , lines 13-14) while ensuring that the sender and 
receiver are using the same sequence (0005, lines 3-5). It is obvious that the teachings 
of Kauffman would have improved the teachings of Bush in view of Shefi by transmitting 
synchronization information at specific intervals in order to prevent attackers from 
attacking a generator's state while ensuring that successful encryption and decryption 
can be performed. 

14. Claims 10 and 23 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Bush in view of Shefi as applied to claims 1 and 13 above, and further in view of 
Glover (US 6,868,495 B1). 

As to claims 10 and 23, Bush in view of Shefi fails to specifically disclose: 

wherein there is a second random generator which performs 
scrambling of access to individual segments on the storage medium if the 
first random generator determines concrete addresses of the segments. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Bush in view of Shefi, as taught by Glover. 
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Glover discloses a system and method for one-time pad encryption key distribution, the 

system and method having: 

wherein there is a second random generator which performs 
scrambling of access to individual segments on the storage medium if the 
first random generator determines concrete addresses of the segments 
(col. 22, lines 51-56). 

Given the teaching of Glover, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Bush in view of Shefi with the teachings of Glover by scrambling 
access to symbols. Glover recites motivation by disclosing that changing parameters 
and decrypting code helps to thwart the efforts of a brute force attack (col. 22, lines 66- 
67; col. 23, line 1 ). It is obvious that the teachings of Glover would have improved the 
teachings of Bush in view of Shefi by scrambling access to symbols in order to prevent 
brute force attacks. 

Conclusion 

15. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See M PEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Sarah Su whose telephone number is (571) 270-3835. 
The examiner can normally be reached on Monday through Friday 7:30AM-5:00PM 
EST.. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William Korzuch can be reached on (571) 272-7589. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Sarah Su/ /William R. Korzuch/ 

Examiner, Art Unit 2431 Supervisory Patent Examiner, Art Unit 2431 



